Chad Thomson ChadThomsonPSC

Keybase proof

I hereby claim:

I am chadthomsonpsc on github.
I am chadthomsonpsc (https://keybase.io/chadthomsonpsc) on keybase.
I have a public key ASCShV5Ep9QFmyvHTQs6wTw2x5IvyWxTSogwX0h5d0MV9Qo

To claim this, I am signing this object:

Forward GnuPG agent from macOS to Linux

On the remote machine

Run gpg once as your to create the directory structure

gpg --list-keys

For headless systemd based hosts

Linux Virtual Machines with Private Network on an Apple M1 Device

Background

The aim was to be able to:

Run multiple Linux VMs on an Apple M1/ARM device
Use Apple's HVF for native performance speeds
Configure VMs to allow network access to each other
Configure VMs to allow access to the internet
Not rely on custom modifications of software

Creating self signed certificates with keytool

NOTE: Do not use self signed certificates in PRODUCTION, for that use a certificate signed by some CA (Certification Authority), and then avoid man-in-the-middle attack.

Creating self signed certificates with keytool

Content

Self signed certificate
Multiple domain names
Certificates for 2wayTLS
Certificate chain

NOTE: Do not use self signed certificates in PRODUCTION, for that use a certificate signed by some CA (Certification Authority), and then avoid man-in-the-middle attack.

Emulating Raspberry Pi 4 with Qemu

Just a quick update before we dive in: what we're actually doing here is running Raspberry Pi OS (64-bit) on a QEMU virtual ARM setup. This isn't full-blown hardware emulation of the Raspberry Pi 4, but more about creating a virtual environment for the OS. It doesn't mimic all the specific hardware features of the Pi 4, but it's pretty useful and great for general testing. I turned to this solution mainly to extract a modified sysroot from the Raspberry Pi OS, something not readily available in other resources. For those looking into detailed emulation of the actual Raspberry Pi 4's hardware in QEMU, check out this link for the latest updates: https://gitlab.com/qemu-project/qemu/-/issues/1208.

Hope it helps! :D

Shortcomings: No GUI yet, only console.

Steps

Akeyless Custom Dynamic Secret Producer Sequence

Sequence diagrams for custom dynamic secret producers

Local Gateway

Sequence flow when client is communicating to the local gateway cluster who is responsible for sepaking with the custom dynamic secret producer webhook.

sequenceDiagram

	#!/bin/bash

	TMUX_VERSION="2.1"
	LIBEVENT_VERSION="2.0.20"
	NCURSES_VERSION="6.0"

	# Script for installing tmux on systems where you don't have root access.
	# tmux will be installed in $HOME/local/bin.
	# It's assumed that wget and a C/C++ compiler are installed.

	#!/bin/sh

	###
	# SOME COMMANDS WILL NOT WORK ON macOS (Sierra or newer)
	# For Sierra or newer, see https://github.com/mathiasbynens/dotfiles/blob/master/.macos
	###

	# Alot of these configs have been taken from the various places
	# on the web, most from here
	# https://github.com/mathiasbynens/dotfiles/blob/5b3c8418ed42d93af2e647dc9d122f25cc034871/.osx

	#!/bin/sh

	awk 'BEGIN {
	split("Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec ", months, " ")
	for (i = 1; i <= 12; i++)
	m[months[i]] = i
	}{
	split($4,array,/\[\|:\|\//)
	year = array[4]
	month = sprintf("%02d", m[array[3]])